What Is a Private Key?

On October 25, 2026, four small payments of 14,568 satoshis each landed at one Bitcoin address. All four were gone in the same block they arrived in, taken by someone other than the sender before the payments had a single confirmation. That address, and two others like it, have now received coins 1,404 times, and every one of those deposits has been taken.¹

Nothing is broken there. The addresses belong to the private key 1, the simplest number there is, and anyone who wants to can use it. Watching software notices each deposit and spends it at once. It is the clearest possible picture of what a Bitcoin private key really is: a number, and whoever knows the number can spend the coins.

Just a Number

A private key is a number and nothing more. Bitcoin uses an elliptic curve called secp256k1, defined in a public standard, and a private key is any whole number from 1 up to that curve's order, a fixed number just under 2²⁵⁶.² A good wallet picks its key at random. Picture flipping a coin 256 times and writing down each heads or tails: that string of 256 ones and zeros is, for all practical purposes, a private key.

Every flip doubles how many keys there could be. Two flips give four possibilities. Ten give 1,024. Thirty give over a billion. All 256 give a number of possible keys 78 digits long:

115,792,089,237,316,195,423,570,985,008,687,907,852,837,564,279,074,904,382,605,163,141,518,161,494,336

Software usually writes a key as 64 characters, using the digits 0 to 9 and the letters a to f. Here is a real one, with the public key and address worked out from it (more on those below). It was made at random for this article, which means it is now a key other people know. Never send anything to it, and never use any key you have seen written down anywhere.

How Big Is That?

You may have heard that there are more possible Bitcoin keys than atoms in the observable universe. That popular line is not quite right. The ordinary matter in the observable universe, counted as hydrogen atoms, comes to roughly 10⁸⁰ atoms, a number about 80 digits long.³ The number of keys is 78 digits long. So the atoms win, by a factor of about 750. What is true, and still staggering, is that the count of keys comes within a couple of digits of the count of every atom in every star, planet and speck of dust we can see.

Here is another way to feel it. In early November 2026, all the machines mining Bitcoin together were making about a thousand quintillion hashes every second, roughly 10²¹.⁴ Mining machines cannot check keys, and checking a key takes far more work than one hash, so this is generous to the guesser. But suppose they could guess keys that fast, and suppose they had been guessing since the universe began, 13.8 billion years ago.⁵ They would have tried about 4.6 × 10³⁸ keys: about four in every 10³⁹, less than one trillionth of one trillionth of one trillionth of all of them.

That is why no one lands on someone else's key by chance. Not even close.

Small Keys Get Found

All of that holds only when the key really is random. On January 15, 2015, someone sent bitcoin to 256 addresses in a single transaction.⁶ Their keys were picked from small ranges on purpose: the key for address number n lies between 2ⁿ⁻¹ and 2ⁿ, so each range is twice the size of the one before. The creator later described it on the BitcoinTalk forum as a rough way of measuring how much cracking power the community has, and has since raised the prizes several times.⁷

The small ones were found long ago. Key number 69 was hidden among about 300 quintillion possibilities, the equivalent of 68 coin flips. Guessers found it, and the coins at its address moved on April 30, 2025.⁸ The key turned out to be 101d83275fb2bc7e0c, and anyone can check that it produces that address. Key number 71, with a range four times as large, the equivalent of 70 coin flips, still guards 7.1 bitcoin that no one has claimed as of November 2026.⁹ A real key is 256 flips. Each extra flip doubles the work, and a real key has 186 more of them than that unclaimed one.

Some keys are weak for a different reason: someone else already knows them. The key 1 at the top of this article is the extreme case. Keys made from a phrase a person could think of, so-called brain wallets, have been found and emptied by the hundreds; a 2016 study found 884 of them in use, and all but 21 had been drained.¹⁰ And in July 2026 a firmware flaw in the Coldcard hardware wallet meant some of its seeds came from a software routine instead of its hardware random number generator; on older models that left only about a trillion possible seeds, and trackers counted well over a thousand bitcoin taken from thousands of addresses.¹¹ The math was never the weak point in any of these. The randomness was.

From Key to Address

From the private key, a wallet works out a public key. It starts from a fixed point on the curve, the same point every Bitcoin wallet uses, and adds that point to itself as many times as the private key says.² Adding it one step at a time would take forever, but a shortcut (doubling the point again and again and adding up the right doublings) gets there in about 256 doublings, a split second for any computer, even for a 78-digit number. The result is the public key.

Going backwards has no known shortcut. Given a public key, the best known methods for finding the private key behind it would take about 2¹²⁸ steps, roughly 3.4 × 10³⁸. Even at the mining network's thousand quintillion a second, that is about ten billion years, and no machine that actually checks keys comes anywhere near that speed. Whether quantum computers could one day change that is a question of its own.

Then the wallet turns the public key into an address, the thing you share to get paid. For most address types, including the common ones starting with 1 and bc1q, the address is a fingerprint (a hash) of the public key; a Taproot address, starting with bc1p, carries an adjusted form of the public key itself.¹² Either way each step goes one way: private key to public key to address, with no known way back. That is why an address can be shared freely without giving the key away.

What Makes It Yours

When you spend, your wallet uses the private key to sign the transaction. Every node that receives it checks the signature against your public key, and none of them ever sees the private key itself. How a signature can prove that without revealing the key is a story of its own.

Most wallets today never show you a private key at all. They show you 12 or 24 words to write down, and every key the wallet makes is worked out from those words.¹³ Twelve words carry 128 bits of randomness, the equivalent of 128 coin flips, and 24 words carry 256.¹⁴ Even 128 flips are far beyond guessing: at the mining network's speed it would take about ten billion years to try them all, and checking a set of words is much slower than a hash.

So no one will guess a well-made key. What loses keys is a copy in the wrong hands: a photo of the words, a note saved to the cloud, a stranger who asks for them. Those are the real risks, and they are about people and habits, not mathematics.

So what is a private key, really? A number, picked at random from a range so big that no one will ever land on it by chance. Everything else, the public key and the address, is worked out from it, one way only. And whoever knows the number can spend the bitcoin.

Lesson 6 of the course covers storing and securing your keys. What makes any money trustworthy in the first place is where the free first lesson begins.